Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-31260: Open Source Digital Asset Management (DAM) Software: ResourceSpace

In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.

CVE
#web#git#php

ResourceSpace open source Digital Asset Management software is the simple, fast, & free way to organise your digital assets

By Appointment To
Her Majesty Queen Elizabeth II
Software Developers
Montala Limited T/A ResourceSpace
Watchfield

I honestly cannot say enough good things about ResourceSpace. Using it has completely revolutionised the way we at Blue Cross are able to work with our digital assets.

We love ResourceSpace. The system has made our photo archive come alive, and has made it easily accessible. We now use a much more diverse range of photos instead of our 'standard picks’.

I am so impressed with how efficient and helpful ResourceSpace has been for us.

We are very pleased with the installation and technical support we receive. What a wonderful company to work with. I would recommend them to anyone who needs to organize and share their resources.

Fairtrade communications staff around the world really appreciate ResourceSpace. It’s proven invaluable as a one-stop for sharing and storing all our images and brand assets. I don’t know how we’d manage without it!

Plan International migrated to the ResourceSpace system in 2010 saving us around £20,000 per annum. Moving to ResourceSpace allowed us to expand our web-based multimedia resources and give Plan’s 6000 staff members access to photos, films, stories, publications, maps and graphics from anywhere in the world. The system is fast, efficient and user friendly.

ResourceSpace has revolutionised Lutheran World Relief’s workflow and processes. Instead of spending hours digging through hundreds of folders for a photo that may not even be high-enough-quality, ResourceSpace cuts that time to seconds. I couldn’t be happier.

Package overview

  • USD

  • GBP

  • EUR

  • Monthly

  • Annual

  • Cloud

  • On-Premise

Free

Trying out the software,
great for remote workers

100GB free storage, no expiry, no restrictions, unlimited users

Self help using our knowledge base

Complimentary onboarding session

Sign up for free

Team Cloud

Perfect for start-ups, project teams and smaller organisations

Ongoing support including upgrades configuration and unlimited bug fixes
Learn more

Core system functions configured by our expert team

RAID redundant storage plus two backup copies, off-site and offline

Unlimited users. Training for up to two admin to cover primary features.

Annual health check to ensure maximum value

50 trees planted every year on your behalf
Learn more

Learn more

Business Cloud

Established organisations with a large suite of digital assets

Ongoing support including upgrades configuration and unlimited bug fixes
Learn more

Advanced onboarding with DAM consultant; complex permissions and workflows
Learn more

RAID redundant storage plus two backup copies, off-site and offline

Unlimited users. In depth training to include advanced features for up to four admin users.
Learn more

Six monthly health check to fine tune your system
Learn more

High specification servers

100 trees planted every year on your behalf
Learn more

Learn more

Enterprise Cloud

For global organisations with multiple offices / teams

Priority support including upgrades configuration and unlimited bug fixes
Learn more

Extensive onboarding sessions with our team of DAM consultants
Learn more

RAID redundant storage plus two backup copies, off-site and offline

Unlimited users. Training sessions to include advanced features - for groups of up to six.
Learn more

Quarterly health check to review usage and set goals
Learn more

Our highest spec servers
Learn more

A separate supported test instance for early access to new developments
Learn more

SFTP drop folder for rapid upload of very large volumes of assets
Learn more

250 trees planted every year on your behalf
Learn more

Learn more

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907